Fortinet white logo
Fortinet white logo

New Features

Support for Modbus serial to Modbus TCP 7.4.4

Support for Modbus serial to Modbus TCP 7.4.4

Note

This information is also available in the FortiOS 7.4 Administration Guide:

FortiGate Rugged models equipped with a serial RS-232 (DB9/RJ45) interface can now receive data in Modbus serial (RTU/ASCII) protocol and convert it to Modbus TCP. With this new feature, FortiGate Rugged models can perform real-time monitoring, control, and coordination across your network. Industrial automation users can now transfer Modbus data more efficiently by reducing the need for extra devices to streamline operations.

The config system icond command includes a parameter for Modbus connection:

config system icond
    set type iec101-104
    set modbus-serial-tcp
end

set modbus-serial-tcp

Specify the type of connection:

  • modbus-serial-tcp: Modbus serial to Modbus TCP.

See Support for IEC 60870-5-101 serial to IEC 60870-5-104 TCP/IP transport 7.4.4 for a description of the config system icond command.

After the Industrial Connectivity service is enabled and configured for an interface, supported FortiGate Rugged devices can receive data from Modbus networks in serial format and convert it to TCP.

In the following topology, the Modbus controller uses Modbus serial to transmit data to FortiGate Rugged, where the data is converted to the Modbus TCP, and sent to the Modbus Remote Terminal Unit (RTU).

To enable Industrial Connectivity for an interface in the GUI:
  1. Go to Network > Interfaces.

  2. Click Create New > Interface, or double-click an interface to open in for editing.

  3. Set Role to Undefined or WAN

    Only internal and WAN interfaces support Industrial Connectivity administrative access.

  4. In the Administrative Access section, select Industrial Connectivity.

  5. Set the remaining options as desired, and click OK.

To enable Industrial Connectivity for an interface in the CLI:
config system interface
    edit "internal1"
        set vdom "root"
        set ip 10.1.100.60 255.255.255.0
        set allowaccess ping https http telnet icond
        set type physical
        set description "link to modbus server"
        set snmp-index 3
    next
end
To configure the Industrial Connectivity service in the CLI:
  1. Configure the Industrial Connectivity service

    config system icond
        set status enable
        set type modbus-serial-tcp
        set tty-device "serial0"
    end
  2. Get the default status:

    get system icond status : enable type : modbus-serial-tcp tty-device : serial0 tty-baudrate : 9600 tty-parity : even tty-databits : 8 tty-stopbits : 1 tty-flowcontrol : none modbus-serial-mode : RTU/ASCII modbus-serial-addr : 1 modbus-serial-timeout-resp: 500 modbus-tcp-unit-id : 255

Support for Modbus serial to Modbus TCP 7.4.4

Support for Modbus serial to Modbus TCP 7.4.4

Note

This information is also available in the FortiOS 7.4 Administration Guide:

FortiGate Rugged models equipped with a serial RS-232 (DB9/RJ45) interface can now receive data in Modbus serial (RTU/ASCII) protocol and convert it to Modbus TCP. With this new feature, FortiGate Rugged models can perform real-time monitoring, control, and coordination across your network. Industrial automation users can now transfer Modbus data more efficiently by reducing the need for extra devices to streamline operations.

The config system icond command includes a parameter for Modbus connection:

config system icond
    set type iec101-104
    set modbus-serial-tcp
end

set modbus-serial-tcp

Specify the type of connection:

  • modbus-serial-tcp: Modbus serial to Modbus TCP.

See Support for IEC 60870-5-101 serial to IEC 60870-5-104 TCP/IP transport 7.4.4 for a description of the config system icond command.

After the Industrial Connectivity service is enabled and configured for an interface, supported FortiGate Rugged devices can receive data from Modbus networks in serial format and convert it to TCP.

In the following topology, the Modbus controller uses Modbus serial to transmit data to FortiGate Rugged, where the data is converted to the Modbus TCP, and sent to the Modbus Remote Terminal Unit (RTU).

To enable Industrial Connectivity for an interface in the GUI:
  1. Go to Network > Interfaces.

  2. Click Create New > Interface, or double-click an interface to open in for editing.

  3. Set Role to Undefined or WAN

    Only internal and WAN interfaces support Industrial Connectivity administrative access.

  4. In the Administrative Access section, select Industrial Connectivity.

  5. Set the remaining options as desired, and click OK.

To enable Industrial Connectivity for an interface in the CLI:
config system interface
    edit "internal1"
        set vdom "root"
        set ip 10.1.100.60 255.255.255.0
        set allowaccess ping https http telnet icond
        set type physical
        set description "link to modbus server"
        set snmp-index 3
    next
end
To configure the Industrial Connectivity service in the CLI:
  1. Configure the Industrial Connectivity service

    config system icond
        set status enable
        set type modbus-serial-tcp
        set tty-device "serial0"
    end
  2. Get the default status:

    get system icond status : enable type : modbus-serial-tcp tty-device : serial0 tty-baudrate : 9600 tty-parity : even tty-databits : 8 tty-stopbits : 1 tty-flowcontrol : none modbus-serial-mode : RTU/ASCII modbus-serial-addr : 1 modbus-serial-timeout-resp: 500 modbus-tcp-unit-id : 255